CVE-2018-14513: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formcontent parameter to the index.php?m=feedback&f=index&v=contact URI...

Directory Traversal

m-server is vulnerable to directory traversals. The application does not restrict escape characters, allowing a malicious user to traverse the directories using a curl request such as http://localhost:8080/../../../../../../etc/passwd to gain sensitive information...

Cross-Site Scripting (XSS)

m-server is vulnerable to cross-site scripting XSS. It is possible for an attacker to embed an iframe containing malicious Javascript code via filenames. This is due to a lack of output encoding when the m-server displays content of the selected directory...

CVE-2018-14043

CVE-2018-14043 affects mstdlib (M Standard Library for C) 1.2.0. The issue arises when M_fs_perms_can_access attempts to delete an existing file that lacks public read/write access during a copy operation, related to fs/m_fs.c and fs/m_fs_path.c. An attacker could create the file and then gain ac...

Fedora Update for visualboyadvance-m FEDORA-2018-fde7a2f291

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-14014: Cross-Site Request Forgery (CSRF)

In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd...

Fedora 27 : visualboyadvance-m (2018-e92359c3b8)

Updating to new version 2.1.0. This update contains important security fixes and it is advised to update to avoid vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora Update for visualboyadvance-m FEDORA-2018-e92359c3b8

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: visualboyadvance-m-2.1.0-1.fc28

VisualBoyAdvance-M is a Nintendo Game Boy Emulator with high compatibility with commercial games. It emulates the Nintendo Game Boy Advance hand held conso le, in addition to the original Game Boy hand held systems and its Super and Co lor variants. VBA-M is a continued development of the now...

m-saga.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-645124 Description| Value ---|--- Affected Website:| m-saga.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID33103: Email Messages Distributing Malicious Software on July 4, 2018

Medium Alert ID: 58356 First Published: 2018 July 5 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33103 may contain the following files: Name | Size...

CVE-2018-12988: Improper Input Validation

GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI...

CVE-2018-13010: Cross-Site Request Forgery (CSRF)

WSTMall v1.9.1170316 has CSRF via the index.php?m=Admin&c=Users&a=edit URI to add a user account...

Cross site scripting

mao10cms 6 allows XSS via the m=bbs&a=index page...

CVE-2018-12695

mao10cms 6 allows XSS via the m=bbs&a=index page...

CVE-2018-12695: Improper Neutralization of Input During Web Page Generation

mao10cms 6 allows XSS via the m=bbs&a=index page...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)

Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerabilit...

m-hamburg.kursportal.info XSS vulnerability

Open Bug Bounty ID: OBB-632137 Description| Value ---|--- Affected Website:| m-hamburg.kursportal.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

l-m-r.se XSS vulnerability

Open Bug Bounty ID: OBB-629268 Description| Value ---|--- Affected Website:| l-m-r.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID32893: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58038 First Published: 2018 June 7 15:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32893 may contain the following files: Name | Size...